$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json) Hash identifier: 0erwCbJtkIcZlAs77E2J1/9uyZ4QuLX+9PCnVjrvL7A= Subject key identifier: BD:42:84:37:2A:C7:EB:16:17:8B:E4:08:84:DA:51:A3:25:49:62:66 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858495C243312F7C6405CEB2E8000 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 29802 IP address blocks: 91.191.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:33:12:f7:c6:40:5c:eb:2e:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=571e54ec-c9da-4900-9388-5bda9ba6d423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:8b:89:b5:a8:2d:2f:93:83:50:0f:d7:9b: ed:d5:f0:87:94:2e:52:77:55:6c:cb:3d:30:97:db: 31:48:3a:68:e8:69:ca:83:64:61:56:c4:99:1e:9f: 9f:39:2d:01:08:b4:3a:a2:72:e0:ce:97:94:4d:89: 65:40:cf:35:db:fc:43:52:83:1d:9d:8f:e6:c7:23: b0:84:7a:92:89:e0:3a:d7:77:d9:98:26:06:51:29: 23:45:11:9f:35:45:5f:d3:0e:07:0b:63:32:d5:c2: 9f:56:e9:7d:be:18:a4:c3:e8:ee:14:30:07:f6:ce: 51:cb:bd:9f:29:73:f6:a5:a1:61:26:f3:3a:c0:8e: d1:86:46:54:29:4a:11:c8:73:fe:9e:04:94:07:4a: 41:44:ae:19:7a:9a:6b:f5:a2:db:6b:3a:91:0a:cf: 97:70:8b:b2:e8:8e:57:40:7a:b9:60:40:74:60:86: 3c:98:59:d2:d5:90:f1:d6:4e:98:66:8d:f8:e4:c1: b4:74:d1:d3:b8:86:61:47:47:ae:98:a4:96:ef:4f: 57:56:e7:1d:c1:41:6b:a0:cd:89:fb:03:75:bc:e3: 03:a2:c4:81:ac:2b:9c:56:24:4a:ad:db:a7:26:c4: 75:23:b0:59:13:39:c3:ff:d1:a1:3f:b6:e7:69:fa: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:84:37:2A:C7:EB:16:17:8B:E4:08:84:DA:51:A3:25:49:62:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:11:d5:23:23:ab:eb:a0:04:cd:f5:0c:6b:b3:3c:2e:ac:d6: d4:f8:58:8a:46:61:1a:28:e4:98:71:eb:ef:f2:9e:0c:93:94: 86:b0:a3:97:b9:e0:d4:77:9b:d7:90:d6:9e:0d:c3:fd:74:0f: ea:b5:0c:de:4e:54:50:d2:25:a4:eb:16:a6:b8:f2:19:00:70: 8a:bb:4e:ee:31:80:e6:fd:7d:c0:a4:51:aa:73:d4:fa:98:96: f3:10:57:3d:8a:ae:cf:e3:d9:22:34:f8:b1:f1:a8:a1:ea:07: 21:bb:86:dd:d0:17:5b:b8:43:fa:d6:98:21:19:ec:89:fe:8a: 23:fd:bd:54:b9:3f:88:52:81:c9:0e:5e:22:36:e4:de:25:a6: bf:36:d8:3c:2e:6d:25:6b:eb:af:94:8c:9f:9a:70:4d:65:d9: 6c:16:c8:55:7d:e7:13:aa:90:28:06:bf:e8:b1:56:98:26:01: c1:c9:2b:22:ca:f0:96:2b:a6:79:00:6a:be:53:7d:5b:39:26: 19:f8:6f:bf:62:1e:28:7d:85:a2:80:19:bc:ef:5e:a0:86:e3: d1:a3:22:fb:4b:9f:5b:90:b9:b7:d1:5b:13:70:99:14:11:2e: b2:4a:40:52:a4:10:5d:d8:82:01:0a:03:83:17:6c:35:5b:15: 37:65:e3:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDMS98ZAXOsugAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NTcxZTU0ZWMtYzlkYS00OTAwLTkzODgtNWJkYTliYTZkNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrGLibWoLS+Tg1AP15vt1fCHlC5Sd1Vsyz0w l9sxSDpo6GnKg2RhVsSZHp+fOS0BCLQ6onLgzpeUTYllQM812/xDUoMdnY/mxyOw hHqSieA613fZmCYGUSkjRRGfNUVf0w4HC2My1cKfVul9vhikw+juFDAH9s5Ry72f KXP2paFhJvM6wI7RhkZUKUoRyHP+ngSUB0pBRK4Zeppr9aLbazqRCs+XcIuy6I5X QHq5YEB0YIY8mFnS1ZDx1k6YZo345MG0dNHTuIZhR0eumKSW709XVucdwUFroM2J +wN1vOMDosSBrCucViRKrdunJsR1I7BZEznD/9GhP7bnafp6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1ChDcqx+sWF4vkCITaUaMlSWJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDY5MWQ3N2EtMmEyZS0z NjMxLTllMDUtMzhhNzk4ZjBiOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIR1SMjq+ugBM31DGuzPC6s1tT4WIpGYRoo5Jhx6+/yngyTlIawo5e5 4NR3m9eQ1p4Nw/10D+q1DN5OVFDSJaTrFqa48hkAcIq7Tu4xgOb9fcCkUapz1PqY lvMQVz2Krs/j2SI0+LHxqKHqByG7ht3QF1u4Q/rWmCEZ7In+iiP9vVS5P4hSgckO XiI25N4lpr822DwubSVr66+UjJ+acE1l2WwWyFV95xOqkCgGv+ixVpgmAcHJKyLK 8JYrpnkAar5TfVs5Jhn4b79iHih9haKAGbzvXqCG49GjIvtLn1uQubfRWxNwmRQR LrJKQFKkEF3YggEKA4MXbDVbFTdl44s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:09 2025 by rpki-client